The `get_pending()` method now properly decrypts private cookies that were present in the jar originally. Resolves #2591.